This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File:                     _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier:          NUs+8pGXyrX5b0EU8Z2Zza489G9qxWZG2yCXv+mfZpU=
Subject key identifier:   30:DA:E1:93:AE:77:B9:70:84:99:0C:00:45:19:38:C7:80:10:A1:A9
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer:       /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number:          0252
Signing time:             Thu 01 Jan 2026 01:13:59 +0000
Manifest this update:     Thu 01 Jan 2026 01:13:58 +0000
Manifest next update:     Thu 08 Jan 2026 01:13:58 +0000
Files and hashes:         1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: BzHXi0h0tE/rp9uRfKDdW4zg5imNaFJYSZmfw9QBL+g=)
                          2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: S8UZRzpubYCJ+X0jACj9ZehbJ6hRsnjRgE1noRmlqCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 01:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
        Validity
            Not Before: Jan  1 01:13:58 2026 GMT
            Not After : Jan  8 01:13:58 2026 GMT
        Subject: CN=6955ca57-f17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:2a:b6:7e:13:0e:38:24:72:41:bb:2c:06:
                    13:14:41:47:72:92:10:ab:b8:38:87:f6:68:9f:30:
                    c3:ff:ff:0a:79:a4:f1:b5:e0:43:eb:81:85:9f:9f:
                    48:7f:fa:d3:9c:8f:c7:94:24:73:d1:32:09:b3:5f:
                    6c:6b:c1:9e:3d:a4:a4:e3:81:9a:f2:3a:14:d7:5e:
                    f1:89:a8:ee:2a:ed:f5:27:6c:3d:3e:4e:60:31:04:
                    9a:83:13:46:8a:29:8f:97:86:26:ce:ab:b2:f9:ab:
                    9f:f7:dc:ee:02:74:27:fa:32:16:db:ef:22:d5:7b:
                    c2:75:16:41:ed:e2:91:8b:5e:19:e2:08:4a:c0:2c:
                    75:f5:33:39:89:b2:ad:ba:56:86:41:aa:1b:8d:79:
                    20:72:eb:71:02:58:ff:00:1c:98:71:47:c0:10:9a:
                    63:1e:98:50:47:b8:ee:16:8d:3b:94:48:4a:de:65:
                    78:7a:86:d2:b0:a0:4b:a4:f8:51:91:f2:dc:01:f0:
                    cb:ba:e6:e6:fd:73:68:cf:27:03:86:2f:4d:3d:3f:
                    5c:16:ea:bb:5e:9e:0b:fd:62:9a:93:eb:1e:18:3b:
                    cb:f6:bc:ab:a1:ec:32:6e:97:a5:e9:2e:51:86:7e:
                    ca:ed:f1:fe:54:94:45:88:00:c3:6f:11:01:d7:c3:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:E1:93:AE:77:B9:70:84:99:0C:00:45:19:38:C7:80:10:A1:A9
            X509v3 Authority Key Identifier:
                keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:b0:4a:d7:81:4f:43:92:82:67:0e:70:58:b6:f7:49:5f:
         86:d4:7d:ec:55:30:fd:14:87:57:52:fd:89:26:67:6b:f2:3b:
         ca:1b:30:6c:9a:e5:57:b5:9f:c8:92:8e:54:e4:93:2f:7d:0b:
         18:fb:66:74:18:06:a3:d8:0d:77:c9:7b:e3:bb:27:88:b4:0d:
         3e:4c:c6:e9:94:fa:6b:32:93:2d:67:7e:ea:b9:c4:0f:3c:4f:
         14:28:25:4b:2d:2a:4c:f6:6e:dd:9d:02:25:11:6b:0b:ad:af:
         f2:ad:df:06:a9:a6:be:5e:08:37:dd:f5:7a:3b:cd:ce:17:0a:
         bd:77:f8:fe:f6:12:09:fd:55:30:ee:ec:e8:45:2d:3e:25:2f:
         a4:f7:19:39:69:09:cd:5d:67:37:31:9b:85:46:fa:da:94:c1:
         50:7b:01:1f:70:81:b5:f9:4a:3d:22:68:c0:f9:5a:39:94:ad:
         50:45:e5:75:78:63:a3:ae:66:40:37:f7:0a:09:0f:16:d4:d4:
         f3:61:d9:5f:98:4a:52:ac:1d:33:11:4f:0f:6a:51:e1:95:a6:
         3f:ec:1a:f4:8c:5d:26:f4:d5:8e:49:54:b5:ce:2c:f6:40:c1:
         f1:90:20:84:03:21:1b:48:f4:3e:7c:19:20:a7:18:46:2a:37:
         17:c0:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 07:35:51 2026 by rpki-client